PT-2026-120769 · Checkmk Gmbh · Checkmk

CVE-2026-113461

·

Published

2026-10-21

·

Updated

2026-10-21

CVSS v4.0

5.2

Medium

VectorAV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.

Fix

Untrusted Search Path

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-829CWE-426

Related Identifiers

CVE-2026-113461

Affected Products

Checkmk